1. Acceptance of Terms
By accessing nodebreach.com, creating an account, or using any NodeBreach service, you agree to be bound by these Terms of Service ("Terms") and our Privacy Policy. If you are using NodeBreach on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms.
If you do not agree, you must not access or use the platform.
2. Platform Description
NodeBreach is a gamified cybersecurity training platform. It provides:
- Isolated Docker container environments running intentionally vulnerable software
- Access to security tools for use exclusively within the NodeBreach platform
- Capture-the-Flag (CTF) exercises, battle mechanics, and leaderboards
- Educational content, certifications, and university-style learning paths
- A world-map game layer with simulated country and infrastructure targets
All targets within the platform are simulated. No real systems, organisations, or infrastructure are targeted. All container activity is isolated within the platform's private network.
4. Prohibited Conduct
You must not:
Violation of these rules may result in immediate account suspension, permanent termination, reporting to law enforcement, and/or civil proceedings.
5. Accounts
You must be at least 18 years of age to create an account. NodeBreach is not directed to children and we do not knowingly permit users under 16 (EU/EEA — GDPR Article 8) or under 13 (US — COPPA) to register. Where local law sets a higher age of digital consent, that age applies. You are responsible for maintaining the confidentiality of your credentials and for all activity under your account. Notify us immediately at support@nodebreach.com if you suspect unauthorised access.
We reserve the right to suspend or terminate accounts that violate these Terms, are inactive for more than 24 months, or where required by law.
6. Subscriptions & Billing
Billing: Subscriptions are billed in advance on a recurring basis (monthly or annually). Payments are processed by Stripe Inc. By providing payment details, you authorise recurring charges.
Cancellation: You may cancel your subscription at any time from your account settings. Cancellation takes effect at the end of the current billing period. No refunds are issued for the remainder of a billing cycle unless stated below.
Refunds: We offer a 7-day refund on first-time paid subscriptions if you have not materially used the platform. Refund requests must be submitted to billing@nodebreach.com within the 7-day window. Token purchases are non-refundable unless the purchase was made in error or fraudulently.
Price changes: We will provide 30 days' notice of any subscription price changes. Continued use after the notice period constitutes acceptance of the new price.
Consumer rights (UK/EU): Where you are a consumer under UK or EU law, you may have a statutory right of withdrawal from the date of purchase (for example, 14 days under the UK Consumer Contracts Regulations 2013), unless you have begun using digital content during this period and acknowledged that this cancels your right of withdrawal. Rights of US consumers are governed by applicable state and federal law.
7. Intellectual Property
NodeBreach and all platform content — including code, graphics, game mechanics, leaderboard data, CTF challenges, course materials, and API design — are owned by or licensed to NodeBreach LLC and protected by copyright, trade mark, and other intellectual property laws.
You are granted a non-exclusive, non-transferable, revocable licence to access and use the platform for permitted training purposes only. You may not copy, modify, distribute, reverse-engineer, or create derivative works from any part of the platform.
8. User-Generated Content
Where you submit content (team names, forum posts, writeups, profile bios), you retain ownership but grant NodeBreach a worldwide, royalty-free licence to display and use it within the platform. You represent that you own or have the right to submit such content and that it does not violate anyone's rights or any law.
We reserve the right to remove any content that violates these Terms without notice.
9. Liability & Warranties
The platform is provided "as is" and "as available". We make no warranties, express or implied, regarding availability, fitness for a particular purpose, or that the platform will be error-free.
To the maximum extent permitted by law, NodeBreach's total liability to you for any claim arising from these Terms or your use of the platform shall not exceed the greater of: (a) the amount you paid us in the 12 months preceding the claim, or (b) US$100.
We are not liable for indirect, consequential, incidental, special, or punitive damages, including loss of profits, loss of data, or business interruption.
Nothing in these Terms limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be excluded by law.
If you are a consumer in the UK or EU, statutory consumer protection rights apply and are not affected by these Terms.
10. Indemnity
You agree to indemnify and hold harmless NodeBreach, its directors, employees, and agents from any claims, damages, losses, or expenses (including legal fees) arising from: your violation of these Terms; your misuse of the platform or any security tools; or your violation of any third party's rights or applicable law.
11. Termination
Either party may terminate the agreement at any time. We may suspend or terminate your access immediately for any breach of these Terms, with or without notice. On termination, your licence to use the platform ceases and we may delete your account data subject to our Privacy Policy retention periods.
Sections 4, 7, 9, 10, and 12 survive termination.
12. Governing Law & Disputes
These Terms are governed by and construed in accordance with the laws of the State of New Hampshire, United States, without regard to its conflict of law principles. Any disputes arising from these Terms shall first be attempted to be resolved by good-faith negotiation. Failing that, both parties submit to the exclusive jurisdiction of the state and federal courts located in New Hampshire, USA. Nothing in this clause limits consumer protections that cannot be waived under the mandatory law of your place of residence.
If you are a consumer habitually resident in the EU, you may also have the right to initiate proceedings in your country of residence. The European Commission provides an online dispute resolution platform at ec.europa.eu/consumers/odr.
13. Binding Arbitration & Class Action Waiver (US Users)
If you are a resident of the United States, you and NodeBreach LLC agree that any dispute arising out of or relating to these Terms or the platform will be resolved through final and binding individual arbitration administered by the American Arbitration Association (AAA) under its Consumer Arbitration Rules, rather than in court, except that you may assert claims in small-claims court if they qualify. The arbitration will be conducted in New Hampshire, USA, or, at your election, by telephone or written submission. Judgment on any award may be entered in any court of competent jurisdiction.
Class action waiver: You and NodeBreach agree to bring claims only in your or its individual capacity and not as a plaintiff or class member in any purported class, collective, or representative proceeding.
30-day opt-out: You may opt out of this arbitration agreement by emailing legal@nodebreach.com with the subject “Arbitration Opt-Out” within 30 days of first accepting these Terms. Opting out does not affect any other part of these Terms.
This section does not apply to users habitually resident in the EU, EEA, or UK, who retain their mandatory consumer rights and access to courts in their country of residence.
14. DMCA Copyright Notice & Takedown
NodeBreach respects intellectual property rights and complies with the US Digital Millennium Copyright Act (17 U.S.C. § 512). If you believe content on the platform infringes your copyright, send a written notice to our Designated Agent containing all elements required by 17 U.S.C. § 512(c)(3):
- Your physical or electronic signature
- Identification of the copyrighted work claimed to be infringed
- Identification of the infringing material and its location (URL) on the platform
- Your contact information (name, address, phone, email)
- A statement that you have a good-faith belief that the disputed use is not authorised
- A statement, under penalty of perjury, that the information in your notice is accurate and that you are the copyright owner or authorised to act on their behalf
Counter-notices may be submitted to the same address and must comply with 17 U.S.C. § 512(g)(3). Repeat infringers will have their accounts terminated.
False claims of infringement may result in liability under 17 U.S.C. § 512(f).
15. Export Controls & Sanctions
The NodeBreach platform includes cybersecurity and dual-use technology. You agree to comply with all applicable US and international export control and sanctions laws, including the US Export Administration Regulations (EAR) and the economic sanctions administered by the US Department of the Treasury, Office of Foreign Assets Control (OFAC).
You represent and warrant that you are not: (a) located in, a resident of, or organised under the laws of any country or region subject to comprehensive US sanctions (including, as of the date hereof, Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, Luhansk, and non-government-controlled areas of Kherson and Zaporizhzhia regions of Ukraine); (b) a person identified on the OFAC Specially Designated Nationals (SDN) List or any other US Government restricted-party list; or (c) accessing the platform on behalf of any such person or jurisdiction.
You agree not to use, export, re-export, or transfer NodeBreach technology in violation of any applicable law. We reserve the right to suspend or terminate access to the platform at our sole discretion to comply with these laws.
16. General Provisions
Entire agreement: These Terms, together with the Privacy Policy, Cookie Policy, and any applicable DPA, constitute the entire agreement between you and NodeBreach LLC regarding the platform and supersede any prior agreements.
Severability: If any provision of these Terms is found unenforceable, the remaining provisions remain in full force and effect.
No waiver: Our failure to enforce any provision is not a waiver of our right to do so later.
Assignment: You may not assign these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets.
Force majeure: Neither party is liable for delays or failures caused by events beyond its reasonable control.
Modifications to the service: We may add, change, discontinue, or remove features of the platform at any time. Material reductions in functionality of paid tiers will be communicated with at least 30 days' notice where practicable.
Notices to you: may be given by email to your registered address or by posting a notice on the platform.
17. Changes to These Terms
We may update these Terms from time to time. Material changes will be notified by email and/or a prominent platform notice at least 14 days before they take effect. Your continued use of the platform after the effective date constitutes acceptance of the revised Terms.
If you have questions about these Terms, contact us at legal@nodebreach.com.